Re: www.ncbi.nlm.nih.gov / pubmed

2010-08-19 Thread Phil Mayers
On 08/18/2010 06:55 PM, Dave Sparro wrote: On 8/18/2010 1:12 PM, Casey Deccio wrote: On Wed, Aug 18, 2010 at 9:48 AM, Dave Sparrodspa...@gmail.com wrote: On 8/18/2010 8:30 AM, Phil Mayers wrote: ...since the ncbi zone is an unsigned child zone, there needs to be an NSEC/NSEC3 record to

Re: Bind as cache DNS and firewall

2010-08-19 Thread Ulrich David
Hi Jason and Robert, Sorry for my lack of details. My firewall has stateful inspection enabled for all port : iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT I permit all outgoing packet. The opened incoming ports are 22 tcp (for all IP), 53 tcp and udp (filtered for my clients

Re: Bind as cache DNS and firewall

2010-08-19 Thread Ulrich David
Hi, I have some more information. I do a tcpdump of incoming packets of the sources of request on udp 53 from external IPs : 08:29:32.482475 IP 195.176.219.26.62511 MY.CACHE.DNS.domain: 12614+ PTR? 167.72.97.76.IN-ADDR.ARPA. (43) 08:29:34.333751 IP 195.176.219.26.25840 MY.CACHE.DNS.domain:

Re: Forward map update unsuccessful from windows - IPv6

2010-08-19 Thread Cathy Almond
The named log shows two attempts to add records. The first succeeds the second fails due to the prerequisite check. Looking at the reverse address request that succeeds we have an address of: fd80:1010::de74 While the dhcpd log message has an address of: fd80:1010::f274 Are you perhaps

Re: www.ncbi.nlm.nih.gov / pubmed

2010-08-19 Thread Lyle Giese
I agree with this idea. Sorta like when a browser is presented with an invalid SSL cert by a website. It could be that you put in example.com when the cert is for www.example.com or in the case of a self-signed cert, as long as I am not giving them sensitive data, I, the user, can accept or deny

How do I stress test my newly setup DNS BIND server?

2010-08-19 Thread Samad Agha
I'm new to setting up DNS servers, I used Webmin to set it up, and now need to test all different functionalities of it before registering it (basically a stress test). Can someone show me some cool commands to do this? Thanks in advance. Samad Agha ___

How do I stress test my newly setup DNS BIND server?

2010-08-19 Thread Samad Agha
I'm new to setting up DNS servers, I used Webmin to set it up, and now need to test all different functionalities of it before registering it (basically a stress test). Can someone show me some cool commands to do this? Thanks in advance. Samad Agha ___

RE: How do I stress test my newly setup DNS BIND server?

2010-08-19 Thread Baird, Josh
Check out the queryperf tool. Thanks, Josh From: bind-users-bounces+jbaird=follett@lists.isc.org [mailto:bind-users-bounces+jbaird=follett@lists.isc.org] On Behalf Of Samad Agha Sent: Thursday, August 19, 2010 10:13 AM To: bind-users@lists.isc.org Subject: How do I stress test my

Multiple CNAME alternantive?

2010-08-19 Thread Steve Arntzen
I would like to resolve dns.ourdomain.com to a list of our DNS server names and possibly their IPs. As we use many DNS servers (and or views) for our different development environments, it would be very helpful for the developers to easily find the name and IP of the proper name server to use.

Re: Multiple CNAME alternantive?

2010-08-19 Thread Phil Mayers
On 19/08/10 15:52, Steve Arntzen wrote: I would like to resolve dns.ourdomain.com to a list of our DNS server names and possibly their IPs. CNAMEs are singleton; this: dns.ourdomain.com. IN CNAME nsdev1.ourdomain.com. dns.ourdomain.com. IN CNAME nsdev2.ourdomain.com. ...is illegal.

Re: Multiple CNAME alternantive?

2010-08-19 Thread Kevin Darcy
On 8/19/2010 10:52 AM, Steve Arntzen wrote: I would like to resolve dns.ourdomain.com to a list of our DNS server names and possibly their IPs. As we use many DNS servers (and or views) for our different development environments, it would be very helpful for the developers to easily find the

Re: Multiple CNAME alternantive?

2010-08-19 Thread Phil Mayers
On 19/08/10 16:18, Phil Mayers wrote: On 19/08/10 15:52, Steve Arntzen wrote: I would like to resolve dns.ourdomain.com to a list of our DNS server names and possibly their IPs. CNAMEs are singleton; this: dns.ourdomain.com. IN CNAME nsdev1.ourdomain.com. dns.ourdomain.com. IN CNAME

Re: Multiple CNAME alternantive?

2010-08-19 Thread Dave Sparro
On 8/19/2010 10:52 AM, Steve Arntzen wrote: I would like to resolve dns.ourdomain.com to a list of our DNS server names and possibly their IPs. As we use many DNS servers (and or views) for our different development environments, it would be very helpful for the developers to easily find the

Re: How do I stress test my newly setup DNS BIND server?

2010-08-19 Thread Samad Agha
Thanks guys; how about something to check for any possible errors that might be generating? Samad On Thu, Aug 19, 2010 at 9:17 AM, Tom Daly t...@dyn.com wrote: Samad, It depends on how you want to test. Are you looking to test DNS query performance (if so, try dnsperf from Nominum), and if

Error Building 9.7.1-P2 on Sparc/Solaris 8

2010-08-19 Thread wiskbroom
Hello; I am trying to build 9.7.1-P2 on Solaris Sparc in the same way I've done so countless other ways in the past, but now getting the following error: [...] making all in /tmp/bind-9.7.1-P2/bin/named/unix gcc  -I/tmp/bind-9.7.1-P2 -I./include -I./unix/include -I. 

Re: Multiple CNAME alternantive?

2010-08-19 Thread Kevin Darcy
On 8/19/2010 1:27 PM, Dave Sparro wrote: On 8/19/2010 10:52 AM, Steve Arntzen wrote: I would like to resolve dns.ourdomain.com to a list of our DNS server names and possibly their IPs. As we use many DNS servers (and or views) for our different development environments, it would be very

RE: How do I stress test my newly setup DNS BIND server?

2010-08-19 Thread Gary Gladney
Infoblox has a nice test that you can run against your primary nameserver. You run the test from their site so you can check to see if you cache is viewable from external DNS queries and things like that. To run the is free and it does not check the performance on the configuration. Gary

Handling of RSASHA256 and RSASHA512 in 9.6.1-P1 ?

2010-08-19 Thread Sue True
Does 9.6.1-P1 as authoritative nameserver support RSASHA256 and RSASHA512 ? We are running 9.7.1-P2 and would like to use RSASHA256 or RSASHA512 to create the keys, but our secondary is still on 9.6.1-P1, can they handle our singed zone with RSASHA256 or RSASHA512, or they have to upgrade ?

I get No mail exchanger (MX) records available for rimm.com error just for a couple of domains

2010-08-19 Thread Samad Agha
#nslookup set query=mx rimm.com *** No mail exchanger (MX) records available for rimm.com Obviously Rimm's DNS cannot be down! What gives? Any ideas? ___ bind-users mailing list bind-users@lists.isc.org

RE: I get No mail exchanger (MX) records available for rimm.com error just for a couple of domains

2010-08-19 Thread Todd Snyder
If you are trying to reach RIM.com (makers of BlackBerry), we are at rim.com ;; QUESTION SECTION: ;rim.com. IN MX ;; ANSWER SECTION: rim.com. 600 IN MX 10 mx05.rim.net. rim.com. 600 IN MX 10 mx03.rim.net. rim.com.

Re: I get No mail exchanger (MX) records available for rimm.com error just for a couple of domains

2010-08-19 Thread Warren Kumari
On Aug 19, 2010, at 2:17 PM, Samad Agha wrote: #nslookup set query=mx rimm.com *** No mail exchanger (MX) records available for rimm.com Obviously Rimm's DNS cannot be down! What gives? Any ideas? A: Why obviously? B: Who is rimm.com? Methinks that you mean rim.com, the blackberry

RE: I get No mail exchanger (MX) records available for rimm.com errorjust for a couple of domains

2010-08-19 Thread Lightner, Jeff
What is so obvious about it not being down? If folks like ATT and other major corporations could have outages I don't see any reason why this one couldn't. Note that you typed rimm.com (two m's) not rim.com. The former has a red WOT rating so I suspect it is used to spoof the latter but

Re: I get No mail exchanger (MX) records available for rimm.com error just for a couple of domains

2010-08-19 Thread Dave Sparro
On 8/19/2010 2:33 PM, Samad Agha wrote: 2- When I perform this query from our ns1 server I do get the correct result, but the same query from ns2 server fails can't find rim.com http://rim.com: Non-existent host/domain Any help would be highly appreciated; many thanks in advance. The

Re: Handling of RSASHA256 and RSASHA512 in 9.6.1-P1 ?

2010-08-19 Thread Mark Andrews
In message alpine.lrh.2.00.1008191403330.7...@gaga.uits.indiana.edu, Sue True writes: Does 9.6.1-P1 as authoritative nameserver support RSASHA256 and RSASHA512 ? We are running 9.7.1-P2 and would like to use RSASHA256 or RSASHA512 to create the keys, but our secondary is still on